--- Start at:2026-01-22T10:04:45
"AreaName" : "autopilot;deviceenrollment;deviceprovisioning;"
Collected EventViewer Entry: microsoft-windows-aad/operational
Collected EventViewer Entry: microsoft-windows-assignedaccess/admin
Collected EventViewer Entry: microsoft-windows-assignedaccess/operational
Collected EventViewer Entry: microsoft-windows-assignedaccessbroker/admin
Collected EventViewer Entry: microsoft-windows-assignedaccessbroker/operational
Collected EventViewer Entry: microsoft-windows-moderndeployment-diagnostics-provider/autopilot
Collected EventViewer Entry: microsoft-windows-moderndeployment-diagnostics-provider/managementservice
Collected EventViewer Entry: microsoft-windows-shell-core/operational
Collected EventViewer Entry: microsoft-windows-user device registration/admin
Collected EventViewer Entry: application
Collected EventViewer Entry: microsoft-windows-appxdeploymentserver/operational
Collected EventViewer Entry: microsoft-windows-crypto-ncrypt/operational
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/admin
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/autopilot
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/debug
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/enrollment
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/operational
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/sync
Collected EventViewer Entry: microsoft-windows-laps/operational
Collected EventViewer Entry: microsoft-windows-moderndeployment-diagnostics-provider/diagnostics
Collected EventViewer Entry: microsoft-windows-provisioning-diagnostics-provider/admin
--- 21 EventViewer entries are collected
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2026_1_22_0_40_26.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DiagnosticLogCSP_Collector_Autopilot_2026_1_22_0_40_26.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2026_1_22_0_41_27.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DiagnosticLogCSP_Collector_Autopilot_2026_1_22_0_41_27.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2026_1_22_1_4_49.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DiagnosticLogCSP_Collector_Autopilot_2026_1_22_1_4_49.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2026_1_22_9_17_36.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DiagnosticLogCSP_Collector_Autopilot_2026_1_22_9_17_36.etl
Copied file:c:\programdata\microsoft\intunemanagementextension\logs\AgentExecutor.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\AgentExecutor.log
Copied file:c:\programdata\microsoft\intunemanagementextension\logs\AppActionProcessor.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\AppActionProcessor.log
Copied file:c:\programdata\microsoft\intunemanagementextension\logs\AppWorkload.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\AppWorkload.log
Copied file:c:\programdata\microsoft\intunemanagementextension\logs\ClientCertCheck.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\ClientCertCheck.log
Copied file:c:\programdata\microsoft\intunemanagementextension\logs\DeviceHealthMonitoring.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DeviceHealthMonitoring.log
Copied file:c:\programdata\microsoft\intunemanagementextension\logs\HealthScripts.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\HealthScripts.log
Copied file:c:\programdata\microsoft\intunemanagementextension\logs\IntuneManagementExtension.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\IntuneManagementExtension.log
Copied file:c:\programdata\microsoft\intunemanagementextension\logs\Sensor.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\Sensor.log
Copied file:c:\programdata\microsoft\intunemanagementextension\logs\Win32AppInventory.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\Win32AppInventory.log
Copied file:c:\windows\panther\unattendgc\setupact.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\setupact.log
Failed (HResult: 0x80070002) to CollectFileEntry:c:\windows\provisioning\autopilot\autopilotconfigurationfile.json
Failed (HResult: 0x80070002) to CollectFileEntry:c:\windows\provisioning\autopilot\profileouput.pml
Failed (HResult: 0x80070003) to CollectFileEntry:c:\windows\servicestate\autopilot\*
Copied file:c:\windows\servicestate\wmansvc\AutopilotDDSZTDFile.json, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\AutopilotDDSZTDFile.json
Copied file:c:\windows\servicestate\wmansvc\CachedHash.txt, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\CachedHash.txt
Copied file:c:\windows\servicestate\wmansvc\CachedTpmEkPub.txt, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\CachedTpmEkPub.txt
Copied file:c:\windows\system32\logfiles\wmi\CloudExperienceHostOobe.etl.001, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\CloudExperienceHostOobe.etl.001
Copied file:c:\windows\system32\logfiles\wmi\CloudExperienceHostOobe.etl.002, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\CloudExperienceHostOobe.etl.002
Copied file:c:\windows\system32\logfiles\wmi\CloudExperienceHostOobe.etl.003, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\CloudExperienceHostOobe.etl.003
Copied file:c:\windows\system32\logfiles\wmi\CloudExperienceHostOobe.etl.004, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\CloudExperienceHostOobe.etl.004
Copied file:c:\windows\system32\logfiles\wmi\CloudExperienceHostOobe.etl.005, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\CloudExperienceHostOobe.etl.005
Copied file:c:\windows\system32\winevt\logs\BootstrapperAgentServiceLogProvider.evtx, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\BootstrapperAgentServiceLogProvider.evtx
Failed (HResult: 0x80070003) to CollectFileEntry:c:\programdata\microsoft\dc\hostos\*.xml
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceEnrollment_2026_1_22_0_45_53.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DiagnosticLogCSP_Collector_DeviceEnrollment_2026_1_22_0_45_53.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceEnrollment_2026_1_22_1_4_50.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DiagnosticLogCSP_Collector_DeviceEnrollment_2026_1_22_1_4_50.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceEnrollment_2026_1_22_9_17_38.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DiagnosticLogCSP_Collector_DeviceEnrollment_2026_1_22_9_17_38.etl
Copied file:c:\windows\system32\logfiles\wmi\Wifi.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\Wifi.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_1_22_1_15_4.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_1_22_1_15_4.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_1_22_9_26_3.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_1_22_9_26_3.etl
Copied file:c:\windows\systemtemp\\DeviceHash_SJR-9752.csv, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DeviceHash_SJR-9752.csv
Copied file:c:\windows\systemtemp\\TpmHliInfo_Output.txt, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\TpmHliInfo_Output.txt
Copied file:c:\windows\systemtemp\\DiagnosticsFrameworkData.json, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\DiagnosticsFrameworkData.json
Copied file:c:\windows\systemtemp\\UEFI_Data_Output.txt, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\UEFI_Data_Output.txt
Copied file:c:\windows\systemtemp\MDMDiagReport.xml, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\MDMDiagReport.xml
Copied file:c:\windows\systemtemp\MDMDiagHTMLReport.html, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\MDMDiagHTMLReport.html
--- 19 file entries are collected
Failed (HResult:0x80070002) to dump HKCU registry:software\microsoft\windows\assignedaccessconfiguration
Failed (HResult:0x80070002) to dump HKCU registry:software\microsoft\windows\currentversion\useroobe
Failed (HResult:0x80070002) to dump HKCU registry:software\microsoft\enterprisemodernappmanagement
--- 3 HKCU registry entries are collected
Succeeded to dump HKLM registry:software\microsoft\intunemanagementextension
Succeeded to dump HKLM registry:software\microsoft\provisioning
Succeeded to dump HKLM registry:software\microsoft\windows nt\currentversion\update\targetinginfo
Succeeded to dump HKLM registry:software\microsoft\windows\assignedaccessconfiguration
Succeeded to dump HKLM registry:software\microsoft\windows\assignedaccesscsp
Succeeded to dump HKLM registry:software\microsoft\windows\autopilot
Succeeded to dump HKLM registry:software\microsoft\windows\currentversion\setup\oobe
Failed (HResult:0x80070002) to dump HKLM registry:software\microsoft\cdndownload
Succeeded to dump HKLM registry:software\microsoft\declaredconfiguration
Failed (HResult:0x80070002) to dump HKLM registry:software\microsoft\dmorchestrator
Succeeded to dump HKLM registry:software\microsoft\enrollments
Succeeded to dump HKLM registry:software\microsoft\enterprisedesktopappmanagement
Succeeded to dump HKLM registry:software\microsoft\enterpriseresourcemanager
Succeeded to dump HKLM registry:software\microsoft\policymanager
Succeeded to dump HKLM registry:system\currentcontrolset\control\clouddomainjoin
Succeeded to dump HKLM registry:software\microsoft\multivariant
--- 16 HKLM registry entries are collected
metadataFile generated:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_8140\MdmDiagLogMetadata.json
--- End at:2026-01-22T10:04:47
